This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json) Hash identifier: XBZ7pPUc5Q1HZWEODt8AE9rbuN3cLDg+6OsuyqNkCtw= Subject key identifier: 6F:66:CB:D0:9C:8E:9B:46:8B:D1:6D:E8:33:B6:6A:2B:5E:4C:22:00 Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be Certificate serial: 019BFC529C475EF71F2BCA3D5CA98457B94A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft Manifest number: 0BEB Signing time: Mon 26 Jan 2026 22:00:30 +0000 Manifest this update: Mon 26 Jan 2026 22:00:30 +0000 Manifest next update: Tue 27 Jan 2026 22:00:30 +0000 Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: o+KFeodF3aVAl8nQfIlcysqSh7oBAtncFft1Y30fpMQ=) 2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:9c:47:5e:f7:1f:2b:ca:3d:5c:a9:84:57:b9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be Validity Not Before: Jan 26 22:00:30 2026 GMT Not After : Jan 27 22:00:30 2026 GMT Subject: CN=6f66cbd09c8e9b468bd16de833b66a2b5e4c2200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:6f:94:ad:c1:4d:3f:5d:26:71:ca:cb:46: 58:ae:b0:78:09:36:e1:d1:95:b8:92:8c:61:94:b7: 86:96:25:4c:24:7c:75:59:43:41:ba:4e:a0:f2:a5: 6f:ae:96:2b:17:7c:e5:b0:04:2a:d5:b3:c4:ef:7a: 96:e7:e6:9b:cc:3d:1a:90:a0:ef:b7:86:82:e8:95: 49:73:d7:5a:5f:8a:76:78:8d:92:81:bb:e4:16:0a: d9:0b:f1:87:43:7d:99:50:c6:79:1d:4e:03:aa:24: 74:aa:5b:65:43:30:91:26:5f:0e:47:cb:1f:ba:40: 79:88:49:f0:f2:7b:c0:a5:d3:64:25:6f:b5:2d:9f: 16:d1:62:de:32:57:a4:ef:ab:77:ec:d0:f7:10:05: 34:75:c6:6c:ff:eb:0d:46:02:31:ba:9a:3d:4a:f2: 19:ec:78:60:08:fd:b2:51:ff:87:bf:d3:0c:66:aa: 96:dc:81:23:09:c0:19:ee:88:4a:26:ea:ad:69:1d: 24:3c:75:61:b4:fd:fc:1b:c7:85:f4:84:8d:a3:3d: 3a:8d:aa:8f:81:04:8e:90:fc:ff:c4:10:08:c2:fb: df:cd:80:de:86:19:a1:e0:79:8d:aa:ed:dc:2f:86: be:7a:5c:c7:76:d3:47:4a:67:db:56:19:2d:48:40: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:CB:D0:9C:8E:9B:46:8B:D1:6D:E8:33:B6:6A:2B:5E:4C:22:00 X509v3 Authority Key Identifier: keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2b:1c:f0:14:22:12:57:67:f7:4b:af:1d:19:fb:f4:e9:0c: e1:47:65:46:22:3c:b4:ec:a0:78:03:11:58:95:a0:1f:47:3b: 03:f9:8f:f8:67:27:fb:76:4a:fc:85:dc:76:0e:80:dc:5b:fd: c7:22:fc:30:ad:96:89:fa:5e:65:73:01:6a:1f:8c:1e:98:dd: 6d:fd:93:dc:47:64:c2:66:1a:23:38:e5:f9:d0:47:fc:fc:cc: 56:ae:9c:f6:22:28:fa:ff:5d:45:79:c3:30:46:7e:64:94:c7: 29:d0:92:b4:cd:99:42:17:3e:a0:61:b6:0c:fa:51:96:be:f9: 57:14:19:56:01:74:1e:0d:62:e4:a6:1c:f6:c1:56:2a:63:6b: 39:60:22:92:d8:d4:13:d3:ee:d1:79:ad:e5:a4:cc:03:cd:13: 9d:37:b6:08:65:49:88:b9:7f:04:e0:e0:0e:c0:e3:9a:4f:cf: df:a2:f8:18:3e:94:71:0d:68:3c:63:1e:0b:1f:89:1e:05:c9: d8:c8:29:fd:7b:3b:d7:bc:a9:04:30:4b:c2:08:2d:09:a1:4a: 20:7d:b7:54:51:21:53:83:9d:ca:a2:10:0a:90:3c:44:ac:65: 4f:cd:4e:82:4f:16:98:6e:47:02:96:25:cc:98:51:00:d1:67: bb:4f:ef:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UpxHXvcfK8o9XKmEV7lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx MzEyYmUwHhcNMjYwMTI2MjIwMDMwWhcNMjYwMTI3MjIwMDMwWjAzMTEwLwYDVQQD Eyg2ZjY2Y2JkMDljOGU5YjQ2OGJkMTZkZTgzM2I2NmEyYjVlNGMyMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+tvlK3BTT9dJnHKy0ZYrrB4CTbh 0ZW4koxhlLeGliVMJHx1WUNBuk6g8qVvrpYrF3zlsAQq1bPE73qW5+abzD0akKDv t4aC6JVJc9daX4p2eI2SgbvkFgrZC/GHQ32ZUMZ5HU4DqiR0qltlQzCRJl8OR8sf ukB5iEnw8nvApdNkJW+1LZ8W0WLeMlek76t37ND3EAU0dcZs/+sNRgIxupo9SvIZ 7HhgCP2yUf+Hv9MMZqqW3IEjCcAZ7ohKJuqtaR0kPHVhtP38G8eF9ISNoz06jaqP gQSOkPz/xBAIwvvfzYDehhmh4HmNqu3cL4a+elzHdtNHSmfbVhktSEDbNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9my9CcjptGi9Ft6DO2aiteTCIAMB8GA1UdIwQY MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0 LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlisc8BQi Eldn90uvHRn79OkM4UdlRiI8tOygeAMRWJWgH0c7A/mP+Gcn+3ZK/IXcdg6A3Fv9 xyL8MK2WifpeZXMBah+MHpjdbf2T3EdkwmYaIzjl+dBH/PzMVq6c9iIo+v9dRXnD MEZ+ZJTHKdCStM2ZQhc+oGG2DPpRlr75VxQZVgF0Hg1i5KYc9sFWKmNrOWAiktjU E9Pu0Xmt5aTMA80TnTe2CGVJiLl/BODgDsDjmk/P36L4GD6UcQ1oPGMeCx+JHgXJ 2Mgp/Xs717ypBDBLwggtCaFKIH23VFEhU4OdyqIQCpA8RKxlT81Ogk8WmG5HApYl zJhRANFnu0/vmQ== -----END CERTIFICATE-----Generated at Tue Jan 27 00:29:38 2026 by rpki-client